GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
Filter advisories
Filter advisories
GitHub reviewed advisories
All reviewed
5,000+
Composer
4,386
Erlang
33
GitHub Actions
22
Go
2,141
Maven
5,000+
npm
3,803
NuGet
687
pip
3,480
Pub
12
RubyGems
897
Rust
898
Swift
38
Unreviewed advisories
All unreviewed
5,000+
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
2,059 advisories
Filter by severity
The Awesome Support WordPress plugin before 6.1.5 does not correctly authorize the...
Moderate
Unreviewed
CVE-2023-5352
was published
Nov 6, 2023
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker...
High
Unreviewed
CVE-2022-45636
was published
Mar 21, 2023
Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2...
Critical
Unreviewed
CVE-2023-28611
was published
Mar 23, 2023
In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible...
High
Unreviewed
CVE-2023-20975
was published
Mar 24, 2023
In updatePermissionTreeSourcePackage of PermissionManagerServiceImpl.java, there is a possible...
High
Unreviewed
CVE-2023-20971
was published
Mar 24, 2023
Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before...
Critical
Unreviewed
CVE-2022-25899
was published
Aug 19, 2022
Block BYPASS vulnerability in iQ Block Country plugin <= 1.2.18 on WordPress.
Critical
Unreviewed
CVE-2022-41155
was published
Nov 19, 2022
Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69...
Moderate
Unreviewed
CVE-2022-40216
was published
Nov 19, 2022
The product performs an authorization check when an actor attempts to access a resource or...
High
Unreviewed
CVE-2024-5705
was published
Feb 20, 2025
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0
could allow an...
Moderate
Unreviewed
CVE-2024-45081
was published
Feb 19, 2025
Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7.0. A highly trusted role (Config...
Moderate
Unreviewed
CVE-2024-39328
was published
Feb 18, 2025
An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack...
Critical
Unreviewed
CVE-2023-26829
was published
Mar 31, 2023
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021...
High
Unreviewed
CVE-2021-25337
was published
May 24, 2022
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes...
Moderate
Unreviewed
CVE-2021-25369
was published
May 24, 2022
app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.
Moderate
Unreviewed
CVE-2024-57969
was published
Feb 14, 2025
Incorrect directory permissions for the shared NI RabbitMQ service may allow a local...
High
Unreviewed
CVE-2024-1156
was published
Feb 20, 2024
Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace...
High
Unreviewed
CVE-2025-0937
was published
Feb 12, 2025
Incorrect permissions in the installation directories for shared SystemLink Elixir based services...
High
Unreviewed
CVE-2024-1155
was published
Feb 20, 2024
Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8...
Moderate
Unreviewed
CVE-2025-0516
was published
Feb 12, 2025
The Zephyr Project Manager plugin for WordPress is vulnerable to limited privilege escalation in...
High
Unreviewed
CVE-2024-7624
was published
Aug 15, 2024
Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated...
Moderate
Unreviewed
CVE-2023-25415
was published
Apr 11, 2023
An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5,...
Moderate
Unreviewed
CVE-2023-0319
was published
Apr 5, 2023
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24421
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
High
Unreviewed
CVE-2025-24407
was published
Feb 11, 2025
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are...
Moderate
Unreviewed
CVE-2025-24419
was published
Feb 11, 2025
ProTip!
Advisories are also available from the
GraphQL API